Soru

Zorluk: KolayWorkstation Hardening and Best Practices

A technician is performing basic workstation hardening on a newly installed Windows computer. Place the following security steps in the logical order they should be performed to secure the system from initial deployment to final user handoff.

  1. 1Change default passwords and disable unused default user accounts (such as the Guest account).
  2. 2Install operating system updates and enable the local host-based firewall.
  3. 3Disable unnecessary OS services, autorun features, and non-essential applications.
  4. 4Configure screen saver lock timeouts and password enforcement for local user profiles.

Cevap

The correct sequence starts with securing default accounts and credentials, followed by updating the system and turning on host firewall protection, then disabling unnecessary services and autorun features to minimize attack surface, and finally configuring screen lock timeouts for end-user environment security.
Securing default user accounts is the foundational step when hardening a system, followed by protecting network access through OS patches and local firewall activation. After establishing base network defenses, unnecessary software services and autorun functions are disabled to shrink the attack surface. End-user security controls, such as screen lock timeouts, are applied last before system deployment.

Adım Adım Çözüm

1
Secure account access
Default credentials and Guest accounts are disabled or modified.
Prevents unauthorized initial access via well-known default settings.
2
Apply baseline security updates and firewall controls
Known security patches are applied and incoming traffic is limited.
Secures the network boundary of the host against exploit attempts.
3
Reduce system attack surface
Unused services, open ports, and autorun functions are disabled.
Limits exposure to malicious code execution and background service vulnerabilities.
4
Apply screen lock and password policies
Screen saver timeout and password lock enforce physical security.
Ensures unattended workstations lock automatically when left unattended.

Anahtar Kavram

Workstation Hardening Standard Operating Procedure
Bu soruyu puanla